$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer File: 23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer (raw, json) Hash identifier: QvtPxYT9FPPtoJQgso8DwbPmJaNQIJY5Ne0t++cYz+0= Subject key identifier: 23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4B81167D4C946F1B797AC952032E1977D35C09E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft caRepository: rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 07 Nov 2024 18:10:18 +0000 Certificate not after: Thu 06 Nov 2025 18:15:18 +0000 Subordinate resources: AS: 52700 IP: 177.73.84.0/22 IP: 191.240.160.0/22 IP: 2804:110c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 28 Nov 2024 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:81:16:7d:4c:94:6f:1b:79:7a:c9:52:03:2e:19:77:d3:5c:09:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 7 18:10:18 2024 GMT Not After : Nov 6 18:15:18 2025 GMT Subject: CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9d:99:ab:a8:3d:4c:da:87:18:52:fd:27:8e: 2d:5b:62:39:32:30:71:a0:44:19:da:05:07:6b:84: ac:ee:c8:56:54:71:b7:7d:08:ee:64:49:34:fe:fb: 14:5a:54:3f:0e:b5:d8:28:96:b0:8e:61:d3:75:c7: 81:ff:ce:f9:97:c9:0c:3c:73:0e:6f:cd:65:a8:86: df:7d:bc:b3:34:21:9a:37:85:d8:2f:d3:2d:5b:45: 73:44:6a:f2:f9:44:18:ca:03:ab:eb:8a:a8:2d:22: 61:4d:18:fa:c9:e1:ca:6d:02:83:64:57:aa:b1:4d: f6:91:59:d0:38:6b:e9:cf:57:40:b2:eb:f7:c9:85: 7d:10:f0:0c:cc:6d:a9:eb:01:97:7c:44:a0:e0:67: 0d:dc:3c:fa:68:31:dc:9e:fd:67:a9:c9:ff:36:ab: 8b:8a:ef:9f:64:18:d1:d8:ff:02:7e:85:a9:fb:d4: 61:07:07:20:f7:9a:97:0b:0b:8d:06:bd:99:1f:0e: 9d:ca:6d:d0:cd:cb:da:10:a1:25:90:ba:9e:78:cb: 74:46:6b:87:be:59:23:78:26:52:4a:6a:6e:16:a7: 73:9c:95:2d:69:ed:a4:48:db:2a:a5:60:5c:67:87: 57:50:5a:8d:a6:00:18:fe:ac:8b:80:a7:82:ad:6a: 61:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.73.84.0/22 191.240.160.0/22 IPv6: 2804:110c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52700 Signature Algorithm: sha256WithRSAEncryption aa:42:52:e0:6c:14:fc:c6:46:27:99:ae:3b:db:d0:f0:af:55: f2:9d:39:1b:dc:31:df:c8:58:a7:ed:f1:a1:14:e1:0b:30:70: 1a:a7:16:96:47:32:de:a1:74:6c:53:f4:d1:03:d2:e3:cd:55: f7:01:38:78:59:20:ad:98:21:d8:4b:79:91:71:2f:2e:74:9a: e3:09:41:60:cc:f1:68:32:9e:31:ba:dd:b3:7d:c1:a1:35:3f: 5b:dc:58:a5:66:f0:df:1e:f9:b2:72:e5:04:96:ce:8b:fc:69: b3:cf:0c:26:27:35:a6:57:7f:4f:f8:d8:7c:8c:87:05:c2:74: c1:70:3f:04:20:8c:fe:21:97:f4:f9:bc:3b:32:28:0e:24:69: 49:bb:76:ba:2e:66:1b:31:58:d0:1b:ed:3b:bc:c6:2c:49:b0: 26:42:03:fc:b7:0d:ce:91:c0:e2:48:9a:90:ec:83:db:2c:d9: 41:43:5a:31:83:b3:db:19:b6:f1:cd:63:a5:f4:10:1a:87:f4: 47:9c:17:a7:90:d4:1f:fd:c8:41:36:c9:99:6c:b6:9b:00:8f: d4:fc:8a:37:5d:41:1b:a2:4a:db:68:3a:f5:85:8d:bc:62:e9: d3:1f:a5:42:99:1c:8f:2c:b4:f7:c9:96:21:c7:95:8b:ac:cd: 7c:7d:e7:9a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUS4EWfUyUbxt5eslSAy4Zd9NcCeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMDcxODEwMThaFw0yNTExMDYxODE1MThaMDMxMTAvBgNV BAMTKDIzQjc3Q0Y3QkQxRjk0RjcyQTZDMDgwODU2OUM0RjUxQTlCQTM4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1nZmrqD1M2ocYUv0nji1bYjky MHGgRBnaBQdrhKzuyFZUcbd9CO5kSTT++xRaVD8OtdgolrCOYdN1x4H/zvmXyQw8 cw5vzWWoht99vLM0IZo3hdgv0y1bRXNEavL5RBjKA6vriqgtImFNGPrJ4cptAoNk V6qxTfaRWdA4a+nPV0Cy6/fJhX0Q8AzMbanrAZd8RKDgZw3cPPpoMdye/Wepyf82 q4uK759kGNHY/wJ+han71GEHByD3mpcLC40GvZkfDp3KbdDNy9oQoSWQup54y3RG a4e+WSN4JlJKam4Wp3OclS1p7aRI2yqlYFxnh1dQWo2mABj+rIuAp4KtamHnAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjt3z3vR+U9yps CAhWnE9Rqbo4mjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjlV ekM5bWV1aFNnd1JoUGd5R1k0dkJKN0tZUGVValZ4VnVWdm9QSkRIb1ovMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzY5 VXpDOW1ldWhTZ3dSaFBneUdZNHZCSjdLWVBlVWpWeFZ1VnZvUEpESG9aLzIvMjNC NzdDRjdCRDFGOTRGNzJBNkMwODA4NTY5QzRGNTFBOUJBMzg5QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsUlUAwQCv/CgMA0EAgACMAcDBQAoBBEMMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDN3DANBgkqhkiG9w0BAQsFAAOCAQEAqkJS4GwU /MZGJ5muO9vQ8K9V8p05G9wx38hYp+3xoRThCzBwGqcWlkcy3qF0bFP00QPS481V 9wE4eFkgrZgh2Et5kXEvLnSa4wlBYMzxaDKeMbrds33BoTU/W9xYpWbw3x75snLl BJbOi/xps88MJic1pld/T/jYfIyHBcJ0wXA/BCCM/iGX9Pm8OzIoDiRpSbt2ui5m GzFY0BvtO7zGLEmwJkID/LcNzpHA4kiakOyD2yzZQUNaMYOz2xm28c1jpfQQGof0 R5wXp5DUH/3IQTbJmWy2mwCP1PyKN11BG6JK22g69YWNvGLp0x+lQpkcjyy098mW IceVi6zNfH3nmg== -----END CERTIFICATE-----Generated at Wed Nov 27 02:16:18 2024 by rpki-client on console-fra.rpki-client.org